This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer File: dHquXSSwyXpCAx81EKFOL5W72Dg.cer (raw, json) Hash identifier: vfyhY1WOLFpKfAEAxAu99MwuhR5ZXHovk65n75bzkI8= Subject key identifier: 74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA383AD5F75307D7C774DFA3A86F1C7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.78.124.0/22 IP: 2a05:6a00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:83:ad:5f:75:30:7d:7c:77:4d:fa:3a:86:f1:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=747aae5d24b0c97a42031f3510a14e2f95bbd838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:75:38:53:d8:37:a0:e8:70:76:cb:75:79:44: 48:94:20:59:0d:bb:d9:14:d5:9c:a3:0a:09:4b:d8: 6a:79:32:3f:5f:b2:33:1a:0f:78:f7:9c:4b:93:9e: aa:78:c6:1a:24:35:08:de:f4:59:33:4d:0d:a4:03: db:ee:da:26:d6:24:69:ec:b7:f9:23:62:73:d0:e6: 5d:9d:8e:83:56:db:c5:a4:2e:39:06:f5:b8:83:25: 1f:d9:79:b8:e1:7f:43:9f:40:66:ab:52:69:87:a1: da:f7:c5:b8:85:ae:a0:2e:62:7e:c5:82:86:65:ee: a1:0b:96:97:8c:f6:fa:f8:8c:e9:28:15:a5:0d:74: 88:a0:85:a5:08:18:02:b7:73:a8:f3:fa:c2:be:98: 37:8f:c4:ee:95:7d:f8:54:2c:5d:8d:e2:48:96:29: 58:50:13:d7:e3:e1:50:db:b4:9c:da:49:ce:01:16: 2d:00:54:f7:42:20:0c:bb:32:0e:be:a0:1e:95:00: b8:e9:da:dc:5b:b1:05:d5:40:1c:c9:1c:ba:bb:24: 87:a4:42:0c:81:b8:e2:43:79:ff:f8:c3:b7:b7:d9: 35:76:4d:51:ad:d0:96:2d:2e:e6:3e:4a:02:0b:05: 5c:7e:0a:1c:18:8a:c6:c6:8e:35:67:36:83:5c:b7: 8f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.78.124.0/22 IPv6: 2a05:6a00::/29 Signature Algorithm: sha256WithRSAEncryption 4d:07:d3:98:05:5e:8e:e9:e5:87:d8:11:09:ce:0c:af:ec:34: 42:6b:47:c8:42:94:ac:23:ad:1d:ab:01:94:40:48:21:af:24: 26:04:bf:f2:ca:1e:4b:98:1f:0d:5c:79:6e:e5:53:f3:b6:ca: 7c:9f:6d:46:14:2e:b2:5f:ed:b9:9e:56:13:4a:f9:4d:72:2a: 52:2e:f3:9e:97:62:21:4a:5f:93:e6:14:c4:40:d4:a6:51:cd: 99:e6:f7:be:86:d4:8a:d0:13:d2:04:a4:72:0c:ca:da:17:21: 2e:a8:5b:e0:9c:e9:7c:78:6e:34:ec:40:ac:d6:f5:d9:c4:0c: ba:3e:3b:98:ac:d6:42:3d:68:5a:9f:a5:8c:4d:1b:72:0e:6e: 4d:6e:db:b9:10:c0:e8:e3:3f:8c:ca:93:d7:32:f9:30:00:7e: 93:97:da:a0:e0:3a:09:69:43:48:2c:15:69:88:31:8c:4d:4d: c6:80:10:88:f3:25:78:c8:41:14:be:d2:ef:e5:e5:60:db:75: b1:79:19:83:a9:59:a3:13:96:4f:4c:76:ee:01:36:42:bb:d0: 51:4d:b0:6e:81:fa:d1:18:08:79:00:4c:d2:f2:72:59:a2:9a: 57:b8:9c:7f:49:b8:dd:d6:40:e0:14:a0:22:6a:2e:ff:cd:a4: ca:6a:c2:af -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7o4OtX3UwfXx3Tfo6hvHHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDdhYWU1ZDI0YjBjOTdhNDIwMzFmMzUxMGExNGUyZjk1YmJkODM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnU4U9g3oOhwdst1eURIlCBZDbvZ FNWcowoJS9hqeTI/X7IzGg9495xLk56qeMYaJDUI3vRZM00NpAPb7tom1iRp7Lf5 I2Jz0OZdnY6DVtvFpC45BvW4gyUf2Xm44X9Dn0Bmq1Jph6Ha98W4ha6gLmJ+xYKG Ze6hC5aXjPb6+IzpKBWlDXSIoIWlCBgCt3Oo8/rCvpg3j8TulX34VCxdjeJIlilY UBPX4+FQ27Sc2knOARYtAFT3QiAMuzIOvqAelQC46drcW7EF1UAcyRy6uySHpEIM gbjiQ3n/+MO3t9k1dk1RrdCWLS7mPkoCCwVcfgocGIrGxo41ZzaDXLePrQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFHR6rl0ksMl6QgMfNRChTi+Vu9g4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU5L2Y0MWZi Zi00ZThkLTRhYWEtOWRiMS02MjZiYmZlZTBiMzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvZjQxZmJm LTRlOGQtNGFhYS05ZGIxLTYyNmJiZmVlMGIzMS8xL2RIcXVYU1N3eVhwQ0F4ODFF S0ZPTDVXNzJEZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuU58MA0EAgACMAcDBQMqBWoAMA0GCSqGSIb3 DQEBCwUAA4IBAQBNB9OYBV6O6eWH2BEJzgyv7DRCa0fIQpSsI60dqwGUQEghryQm BL/yyh5LmB8NXHlu5VPztsp8n21GFC6yX+25nlYTSvlNcipSLvOel2IhSl+T5hTE QNSmUc2Z5ve+htSK0BPSBKRyDMraFyEuqFvgnOl8eG407ECs1vXZxAy6PjuYrNZC PWhan6WMTRtyDm5Nbtu5EMDo4z+MypPXMvkwAH6Tl9qg4DoJaUNILBVpiDGMTU3G gBCI8yV4yEEUvtLv5eVg23WxeRmDqVmjE5ZPTHbuATZCu9BRTbBugfrRGAh5AEzS 8nJZoppXuJx/Sbjd1kDgFKAiai7/zaTKasKv -----END CERTIFICATE-----Generated at Sun Jan 25 21:08:49 2026 by rpki-client